Abstract

Address Space Layout Randomization (ASLR) is a key defense mechanism against buffer overflow attacks in cybersecurity. However, extant research [1], [2], [5], [6] has identified several limitations, including its static nature, vulnerability to information leakage, and lack of real-time adaptability. Given these shortcomings, this research proposal aims to introduce and rigorously test a novel enhancement to traditional ASLR systems by employing dynamic re-randomization techniques combined with optimized flag and canary checking. Drawing on prior research by Ganz, Evtyushkin, et al., Aristizabal, and Thompson [1], [2], [5], [6], we hypothesize that this approach will offer a more robust, adaptive, and computationally efficient defense mechanism against buffer overflow and related attacks. This research will employ empirical testing methods to validate the effectiveness and resilience of the proposed enhancements. The ultimate goal is to contribute to developing a more secure and adaptable ASLR system capable of meeting the complex challenges of modern cybersecurity.

Authors: Aisha Lalli, Aspen Olmsted

Published in: International Conference for Internet Technology and Secured Transactions (ICITST-2023)

  • Date of Conference: 13-15 November 2023
  • DOI: 10.20533/ICITST.2023.0023
  • ISBN: 978-1-913572-63-1
  • Conference Location: St Anne’s College, Oxford University, UK

0